
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json)
Hash identifier: 5DP/ClxUb1RDU0lJe+VvACdiykEBFv2DDe/xAvalJQc=
Subject key identifier: D4:EE:96:F6:64:70:AC:FD:64:00:C3:4C:DF:37:9F:B2:FD:C1:59:C8
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019CABD98C75DB9B9B860E80105BB52E0E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
Manifest number: 1571
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: 2bkPk-Ot1qaZU9LokqaM6q6xdF0.roa (hash: FKs43X1xKZGBJpJSHiH34tt6wllzqU8nAr6+m1ghTU0=)
2: 4Zdg2MQSYklkR7c-l8IxUi_TKoU.roa (hash: nBkl98E0y+zp7UHLK7yW+DxyvmorfZ8LgRx1oXurW68=)
3: 4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa (hash: 5TzAawGzbQ+BkfeGhAzCFqHBUQwaDb09xlhuP0hvLkc=)
4: TG3cV_k_6T9HbxHghkTkoJbXOL0.roa (hash: burWH/ULqeg/o8zbECBxBAYn5WigohJQk5bXldlsBxE=)
5: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: 4ulnCclSfc2srSsavleZThTnp/OWU++ffb1+zhHc9IU=)
6: YXwTm4AmXj7P3L-oHjQ9SCRkIB8.roa (hash: BEZ8noNyxFYH9s7y6LdJlLx1xzBr+aJybJ/406MKOQM=)
7: YYz0Ra-AyeN1y-x_tz99q6uROXw.roa (hash: d1wNmR3qGWlzOdOJM2Cg8ES808SIUCxvq3RhFeBu6hA=)
8: eq6O520dR9h5ZDTtwmQ1vFOWocg.roa (hash: WayNVSTyYUA3PrVVuq/1FxZpGE5s8+ZfaV8xAD2RAjQ=)
9: ioM3AXpUis9J40gGub2U9jhjnqY.roa (hash: FQpQflORWZoeyUv7a6WExDaKoi/29z9/D4oDeFDhbQc=)
10: qydP8Ocj7OIzj_U81Z5d_MW1T18.roa (hash: TfA/tv13aYJLnXxl1BypCd3xtsBlvQQuGSTtjj37SIo=)
11: x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa (hash: hbLajVkI4hSS08XndEILFj9TEfJ8gLTfZffiq7R2pbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8c:75:db:9b:9b:86:0e:80:10:5b:b5:2e:0e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=d4ee96f66470acfd6400c34cdf379fb2fdc159c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:d9:df:7d:2b:74:9d:f0:e4:51:f7:56:a5:
b1:dd:17:f4:2d:1d:1b:2b:8a:83:36:f5:6c:3a:07:
71:3d:79:e4:56:57:79:0a:9e:42:86:80:3c:e9:1a:
d0:5c:9b:3e:0f:44:72:27:62:87:ab:bb:ff:dc:c2:
2e:84:34:e7:4c:d9:85:c3:88:94:c7:6a:ac:f1:c6:
fe:8d:b2:d0:18:c5:9d:90:c6:b6:3c:05:72:be:ab:
2e:68:df:aa:3c:a9:61:12:e9:ab:b1:24:8b:a2:c6:
c2:51:97:c2:28:ce:7b:39:fc:9e:0b:c9:9a:0e:ab:
74:9b:9e:2e:f3:18:83:90:d3:e3:a3:60:d9:41:27:
94:4a:db:19:77:1b:c7:81:a1:20:44:71:d5:57:0f:
27:4f:e5:0b:49:2b:e0:42:f3:d4:1b:e6:5b:f2:02:
c9:d3:27:34:d8:f5:42:2c:1f:25:10:d1:e7:70:5e:
e1:41:b9:a1:7b:63:e9:9e:6d:fe:5e:88:b7:4f:bd:
9f:04:ed:b0:db:69:58:55:94:23:1c:37:29:43:7c:
3d:ee:6b:24:21:6d:ab:25:bb:10:88:7b:3d:6f:e3:
02:10:38:31:95:5a:9b:94:1c:4a:76:d0:83:45:64:
0f:16:11:71:3e:f1:20:f2:38:af:bf:be:70:cf:f1:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EE:96:F6:64:70:AC:FD:64:00:C3:4C:DF:37:9F:B2:FD:C1:59:C8
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:16:92:53:36:82:8b:94:8d:b5:fe:8b:9a:3e:a7:ce:65:a8:
d8:e7:f0:4f:a3:e4:54:ce:86:81:e1:e7:80:01:72:47:24:fa:
53:d4:13:3f:f0:16:f7:5c:81:10:ac:cf:c5:7c:be:53:3e:09:
ee:3e:20:cd:e0:e2:36:21:d5:7c:85:20:5d:1f:0d:e0:e6:93:
89:4b:1e:ab:f8:91:a0:bc:4d:0d:57:fc:e5:52:a6:db:ad:15:
e8:a0:7d:ac:06:f0:89:b3:99:c8:36:38:9d:a1:b5:50:88:37:
22:b7:20:2c:b4:76:f7:fa:04:fa:c0:a7:d7:15:7d:43:7c:27:
5f:58:f1:ea:33:86:3a:62:38:d7:18:b7:af:9d:9c:eb:f2:24:
f8:b2:87:48:d4:08:31:36:3f:f8:20:cd:94:97:75:9b:94:e2:
a9:bf:1c:d1:f5:23:d9:b5:ac:92:f8:cb:d6:01:88:0c:37:a9:
62:6d:71:5d:8e:a2:22:95:b9:83:b8:bc:fb:ab:57:4e:55:99:
a7:07:56:be:04:f6:4c:c1:8e:29:28:9b:3a:f8:dd:d2:e8:d1:
1f:9e:c7:44:50:59:37:3a:46:c8:76:5d:88:4a:3f:eb:ff:9c:
bd:a1:33:0a:e0:89:66:80:c8:9c:c8:96:e9:7e:75:a9:d4:b7:
32:1c:3b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Yx125ubhg6AEFu1Lg5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj
ODI3N2UwHhcNMjYwMzAyMDAwMTI3WhcNMjYwMzAzMDAwMTI3WjAzMTEwLwYDVQQD
EyhkNGVlOTZmNjY0NzBhY2ZkNjQwMGMzNGNkZjM3OWZiMmZkYzE1OWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut7Z330rdJ3w5FH3VqWx3Rf0LR0b
K4qDNvVsOgdxPXnkVld5Cp5ChoA86RrQXJs+D0RyJ2KHq7v/3MIuhDTnTNmFw4iU
x2qs8cb+jbLQGMWdkMa2PAVyvqsuaN+qPKlhEumrsSSLosbCUZfCKM57OfyeC8ma
Dqt0m54u8xiDkNPjo2DZQSeUStsZdxvHgaEgRHHVVw8nT+ULSSvgQvPUG+Zb8gLJ
0yc02PVCLB8lENHncF7hQbmhe2Ppnm3+Xoi3T72fBO2w22lYVZQjHDcpQ3w97msk
IW2rJbsQiHs9b+MCEDgxlVqblBxKdtCDRWQPFhFxPvEg8jivv75wz/H+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTulvZkcKz9ZADDTN83n7L9wVnIMB8GA1UdIwQY
MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt
NDdlMDkzNzk4OWE4LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4
LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxaSUzaC
i5SNtf6Lmj6nzmWo2OfwT6PkVM6GgeHngAFyRyT6U9QTP/AW91yBEKzPxXy+Uz4J
7j4gzeDiNiHVfIUgXR8N4OaTiUseq/iRoLxNDVf85VKm260V6KB9rAbwibOZyDY4
naG1UIg3IrcgLLR29/oE+sCn1xV9Q3wnX1jx6jOGOmI41xi3r52c6/Ik+LKHSNQI
MTY/+CDNlJd1m5Tiqb8c0fUj2bWskvjL1gGIDDepYm1xXY6iIpW5g7i8+6tXTlWZ
pwdWvgT2TMGOKSibOvjd0ujRH57HRFBZNzpGyHZdiEo/6/+cvaEzCuCJZoDInMiW
6X51qdS3Mhw7fg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:05 2026 by rpki-client